Rokarolla banking Trojan targets Android phones globally

A new Android banking trojan called "Rokarolla" is rapidly spreading by masquerading as popular apps such as Chrome and TikTok. The malware is distributed chiefly through unofficial app stores and third‑party websites, where it mimics legitimate applications to deceive users into installing it.

Security researchers say Rokarolla can compromise up to 217 banking and cryptocurrency apps worldwide, stealing login credentials, screen‑lock passwords and one‑time SMS verification codes. Experts advise users to install apps only from official stores, keep Google Play Protect enabled, update their operating systems, and promptly remove any suspicious or unverified applications.